Re: [ietf-privacy] Privacy of CLIENTID for IMAP/SMTP

2019-08-19 Thread Fernando Gont
Hello, Kai, On 19/8/19 19:07, Kai Engert wrote: > Hello, > > I would like to ask for feedback on potential privacy concerns related > to the following drafts, that describe a CLIENTID feature for the IMAP > and SMTP protocols: > * https://tools.ietf.org/html/draft-yu-imap-client-id > *

Re: [ietf-privacy] Privacy of CLIENTID for IMAP/SMTP

2019-08-19 Thread Stephen Farrell
Hiya, I didn't read the drafts, but Nick's comments make sense to me so I'd give those a +1 (modulo not having read the draft of course:-) One other thought... On 19/08/2019 17:07, Kai Engert wrote: > If the client > supports it, and if the connection is encrypted, then the client > sends

Re: [ietf-privacy] Privacy of CLIENTID for IMAP/SMTP

2019-08-19 Thread Nick Doty
Thanks for sharing the proposal and the implementation ideas. I can definitely see security advantages to this kind of approach. By sending an additional identifier along with a username and password, a server can more reliably recognize clients it has seen before, and that kind of information

[ietf-privacy] Privacy of CLIENTID for IMAP/SMTP

2019-08-19 Thread Kai Engert
Hello, I would like to ask for feedback on potential privacy concerns related to the following drafts, that describe a CLIENTID feature for the IMAP and SMTP protocols: * https://tools.ietf.org/html/draft-yu-imap-client-id * https://tools.ietf.org/html/draft-storey-smtp-client-id The Thunderbird